CVE-2024-24919-Exploit-PoC-Checkpoint-Firewall-VPN

CVE-2024-24919-Exploit-PoC-Checkpoint-Firewall-VPN Инструмент эксплуатации для эксплуатации уязвимости CVE-2024-24919 в VPN Checkpoint Firewall Установка: root@kitploit: git clone https://github.com/r4p3c4/CVE-2024-24919-Exploit-PoC-Checkpoint-Firewall-VPN Требования: root@kitploit: pip install -...

CVE-2024-24919-Checkpoint-Firewall-VPN-Check

CVE-2024-24919-Checkpoint-Firewall-VPN-Check Этот инструмент используется для проверки уязвимости CVE-2024-24919 в VPN Checkpoint Firewall...

CVE-2025-67644-LangGraph-3.0.1-SQLite-Checkpoint-SQL-Injection

CVE-2025-67644 PoC – SQL-инъекция в LangGraph SQLite Checkpoint CVE-2025-67644 — это уязвимость SQL-инъекции CWE-89 в пакете langgraph-checkpoint-sqlite часть экосистемы LangGraph / LangChain. Она позволяет атакующему внедрять произвольный SQL через неэкранированные ключи фильтра метаданных ,...

CVE-2021-30357_CheckPoint_SNX_VPN_PoC

CVE-2021-30357CheckPointSNXVPNPoC Доказательство концепции для привилегированного чтения файлов через CheckPoint SNX VPN Linux Client. Подверженная версия CheckPointVPNSNXLinux800007075.sh Контрольная сумма MD5: 4372e9936e2dfb1d1ebcef3ed4dd7787 Эксплойт Для эксплуатации просто загрузите любой фай...

CVE-2024-24919

CVE-2024-24919 Шаблон Nuclei для обнаружения CVE-2024-24919. Уязвимость обхода пути в CheckPoint SSLVPN. Кстати. Отличная статья, которая вдохновила меня написать этот простой шаблон в 2:00 ночи. Источник: https://labs.watchtowr.com/check-point-wrong-check-point-cve-2024-24919/...

CVE-langgraph

cve-id ⚡ Uso Simples Use este projeto apenas em ambientes seguros e autorizados, tais como: Máquinas virtuais locais Contêineres Docker Ambientes de laboratório isolados Ambientes autorizados de teste de penetração Exemplo de configuração: root@kitploit: git clone cd Project use python follow bel...

CVE-2024-24919-POC

CVE-2024-24919 PoC 🚀 🔥 Описание Этот скрипт автоматизирует эксплуатацию CVE-2024-24919 несанкционированное раскрытие информации в Checkpoint Security Gateway. 📌 Возможности ✅ Проверка одиночных и множественных URL ✅ Автоматизированная эксплуатация ✅ Просто и быстро 🛠️ Использование Клонируйте этот...

CVE-2024-11393

CVE-2024-11393 Hugging Face Transformers MaskFormer 模型反序列化不可信数据远程代码执行漏洞 漏洞高级概述及影响： 攻击者可以通过向 Hugging Face Transformers 仓库中的 convertmaskformerswintopytorch.py 脚本提供恶意的 maskformer resnet 检查点文件，在目标主机上执行任意代码。 如果不知情的用户使用了第三方的 maskformer resnet 检查点文件，执行 convertmaskformerswintopytorch.py 脚本将导致受害者系统上的远程代码执...

CVE-2024-24919

CVE-2024-24919 Script rapido e semplice che prende in input un file con più URL per verificare la vulnerabilità CVE-2024-24919 in CHECKPOINT. 3 Esempio di file di input: Demo Crediti Gustavo Segundo - ByteNull%00...

CVE-2024-11394

CVE-2024-11394 Vulnerabilità di esecuzione remota di codice tramite deserializzazione di dati non fidati nel modello Trax di Hugging Face Transformers Panoramica di alto livello ed effetti della vulnerabilità: La vulnerabilità consente a un attaccante di eseguire codice arbitrario sulla macchina...

CVE-2024-9465

CVE-2024-9465 Checkpoint SQL इंजेक्शन समय-आधारित हमला CVE-2024-9465 SHODAN खोज root@kitploit: https://www.shodan.io/search?query=html%3A%22Expedition+Project%22 html:"Expedition Project" FOFA खोज root@kitploit: https://en.fofa.info/ body="Expedition Project" || title="Expedition Project" उपयोग...

Check Point Quantum Gateway - Information Disclosure

Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available. id: CVE-2024-24919 info: name: Check Poi...

Event-ID-263-Rule-Name-SOC287---Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-

Questo repository non contiene un README...

GHSA-533J-2V4Q-MW5H LangChain MongoDB has NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposure

Executive Summary A NoSQL injection issue exists in the langgraph-checkpoint-mongodb and langgraph-store-mongodb libraries. MongoDBSaver.list and MongoDBStore.search methods accept a filter parameter that is incorporated into MongoDB queries without sufficient validation. Because MongoDB query...

CVE-2026-15679

Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face PyTorch Image Models. User interaction is required to exploit this...

CVE-2026-15679 Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face PyTorch Image Models. User interaction is required to exploit this...

CVE-2026-15679

The vulnerability is in timm's checkpoint parsing code, which deserializes untrusted PyTorch checkpoint data without validation, enabling arbitrary code execution in the current process. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). No affected ve...

EUVD-2026-63459

Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face PyTorch Image Models. User interaction is required to exploit this...

CVE-2026-75104

Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers can supply malicious index files with parent-directory references or absolute paths that are joined without validation, enabling...

CVE-2026-75104 Hugging Face Transformers Path Traversal via Checkpoint Index

Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers can supply malicious index files with parent-directory references or absolute paths that are joined without validation, enabling...